Can't encrypt a backup hardrive

Discussion in 'OS X El Capitan (10.11)' started by kevs1, May 19, 2016.

  1. kevs1 macrumors regular

    Joined:
    Mar 20, 2016
    #1
    I have an external drive partitioned into 1) data and 2) the Mac OS. The mac os also has some data files. The 1) data drive encrypts fine. When I right click to encrypt the 2) Mac os drive is says " A Recovery system for the targeted disk is required" and then wont encrypt.
     
  2. DeltaMac macrumors 604

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #2
    Is there a question there?
    File Vault expects that a bootable OS X partition will have a Recovery system installed, too.
    You can encrypt the system partition (with File Vault), if there is a Recovery system partition on that same drive.
    That's what the message means.

    This page would help, too.
     
  3. kevs1 thread starter macrumors regular

    Joined:
    Mar 20, 2016
    #3
    Thanks Delta, I'm using File Vault. It's just an external drive partition, I right click and choose encrypt. I've done it before, so I'm puzzled. Maybe this is a new rule? As far as recovery system, oh.. I'm on super duper and it does not have the recovery on it's clones.
    I actually don't care about encrypting the system on that partition, just one date folder on it I'd like to encrypt, but I dont think you can encrypt folders...?

    The create recovery partition is a nice link, but this is just a clone I'm taking offsite for backup, no need for all that.
     
  4. NoBoMac macrumors 6502a

    Joined:
    Jul 1, 2014
    #4
    The requirement has always been there, hence, I don't encrypt my SuperDuper! main drive clones.

    You can use some third party freeware to encrypt the folder. Or what I do, just delete the user account from the clone, keep a separate admin account that is devoid of anything, and keep my data backed up via TimeMachine and manual backups. The last two can be FileVault encrypted, and the clone becomes an emergency boot option to recover/restore the machine OS.

    Or, just delete the folder in question and recover it from TM when needed.
     
  5. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #5
    Just use Disk Utility to make an encrypted sparse bundle image then put the data you want inside that encrypted image.

    https://support.apple.com/en-us/HT201599
     
  6. kevs1 thread starter macrumors regular

    Joined:
    Mar 20, 2016
    #6
    No Bo / Weasel, thanks, neither of those ideas works as this is an off site backup, so I need to have one offsite bootable backup. The only issue I guess is for the first time, buying the new 27" I'm putting Data on the Mac HD, So in the past, I never did that. I always left the Mac HD pure so never saw this before. I can't make a spare drive for the data as I use it too much on a daily basis and cannot be encumbered.

    What is a good 3rd party app that can encrypt the drive? Maybe that is the best solution, or consider bailing on SD for CCC. Though I like SD for a long time. It's off site, and the odds on anyone getting to it is rare.

    Also have this idea: Maybe before taking it off site, and then again when bringing back, just move the data from the OS drive to the data drive. pita.
     
  7. NoBoMac macrumors 6502a

    Joined:
    Jul 1, 2014
    #7
    Weaselboy's suggestion re: encrypted sparse bundle will work for your needs, if I'm understanding the situation.

    The drive is still bootable, the data you want to protect is protected. Only pita is that need to mount that bundle for first use of the day.
     
  8. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #8
    Yes... what I had in mind was say if OP wanted to protect everything in the Documents folder. Just make an encrypted sparse bundle image and put it in the Documents folder, then drop the entire contents of that folder inside the encrypted image. So you could still boot to the cloned drive then just open the encrypted image to access the documents.
     
  9. kevs1 thread starter macrumors regular

    Joined:
    Mar 20, 2016
    #9
    Thanks wrote SD, and they said just boot into the backup clone, install the OS fresh, then it will have recovery, encrypt, and the smart update wont overwrite the recovery drive -- if I have that correct. I don't have time today to test that before taking it offsite, but may later...
     
  10. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #10
    Yep... that would work. Just to be clear though, "install fresh" normally implies erasing the drive and then reinstalling the OS, and you don't want that. If you just boot to that volume the DL and install the OS it will create a recovery partition for you, then you will be able to enable FV2 while booted to that volume.
     
  11. kevs1 thread starter macrumors regular

    Joined:
    Mar 20, 2016
    #11
    The info I got was to reboot from clone, go to app store, download OS, encrypt, and it's a one time thing.

    So: I would need to do smart update? And that's where I would think the new recovery would disappear and get overwritten, no? I have not heard a response back from them yet.
     
  12. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #12
    I think you are on track. Yes.. just boot to the clone, DL the OS and install it. Then when it reboots after the OSD install, turn on FileVault and wait for it to encrypt. No need to update after that. The ODS install will the latest 10.11.5 version.

    Subsequent SD updates should not disturb the recovery partition.
     
  13. kevs1 thread starter macrumors regular

    Joined:
    Mar 20, 2016
    #13
    Thanks Weasle, I never used File Vault, I just do the right click, encrypt this drive, ok? same?
    What is OSD, and DL stand for?

    Would that even work with scheduled smart updates? Are you on Super Duper as well?
     
  14. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #14
    You don't want to just right click and encrypt, because then you would not be able to boot to the drive. You need to boot to the drive after you update the operating system (OS << not OSD I cannot type!), then turn in FileVault in System Preferences. This uses that same technology as if you had right clicked, but sets the system up so you can boot to the disk

    Sorry... OS is operating system and DL is download.

    SuperDuper will still work, with one problem. If you have this disk attached as an external, you will need to first double click the volume in Finder then "unlock" the disk for SD to be able to write to the volume.

    I don't use SD, but rather Carbon Copy Cloner due to this recovery partition business. I'm frankly surprised SD has not updated their app to handle this yet.
     
  15. kevs1 thread starter macrumors regular

    Joined:
    Mar 20, 2016
    #15
    Thanks Weasel, well being that this is a drive I take offsite and on again every 3 months , I could live with that. But this scenario could not work for daily schedule backups? For those I'm in my house and don't use encryption. I think the word is that SD would have done recovery by now, but they don't know how ( I suppose) and is not going to do it in future but who knows? I'm still hanging with them as I have been with them so long and am a loyal guy!
     
  16. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #16
    Are you keeping the drive attached all the time? If you do, you only have to mount and unlock once then it stays that way and your daily backups would keep on working until you eject the encrypted volume.
     
  17. kevs1 thread starter macrumors regular

    Joined:
    Mar 20, 2016
    #17
    No this one is off site all the time, then comes home once every 3 months, and I smart update and take away- hence I can live with the file vault thing.

    The other drives that stay in house are attached all the time..
     

Share This Page